CVE-2021-47158
published 2024-03-25CVE-2021-47158: In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: add error handling in sja1105_setup() If any of…
PriorityP415medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.23%
14.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: sja1105: add error handling in sja1105_setup()
If any of sja1105_static_config_load(), sja1105_clocking_setup() or
sja1105_devlink_setup() fails, we can't just return in the middle of
sja1105_setup() or memory will leak. Add a cleanup path.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.14.6-1 (bookworm) | linux 5.14.6-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 8aa9ebccae87621d997707e4f25e53fddd7e30e4 < dd8609f203448ca6d58ae71461208b3f6b0329b0 | dd8609f203448ca6d58ae71461208b3f6b0329b0 |
| linux | linux | >= 8aa9ebccae87621d997707e4f25e53fddd7e30e4 < 987e4ab8b8a4fcbf783069e03e7524cd39ffd563 | 987e4ab8b8a4fcbf783069e03e7524cd39ffd563 |
| linux | linux | >= 8aa9ebccae87621d997707e4f25e53fddd7e30e4 < cec279a898a3b004411682f212215ccaea1cd0fb | cec279a898a3b004411682f212215ccaea1cd0fb |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 0 < 5.14.6-1 | 5.14.6-1 |
| linux | linux_kernel | >= 5.11 < 5.12.9 | 5.12.9 |
| linux | linux_kernel | >= 5.2 < 5.10.42 | 5.10.42 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: net: dsa: sja1105: add error handling in sja1105_setup()
vendor_redhat·2024-03-25·CVSS 5.5
CVE-2021-47158 [MEDIUM] CWE-402 kernel: net: dsa: sja1105: add error handling in sja1105_setup()
kernel: net: dsa: sja1105: add error handling in sja1105_setup()
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: sja1105: add error handling in sja1105_setup()
If any of sja1105_static_config_load(), sja1105_clocking_setup() or
sja1105_devlink_setup() fails, we can't just return in the middle of
sja1105_setup() or memory will leak. Add a cleanup path.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9) - Not affected
Package: kernel-rt (Red Hat Enterprise Lin
Debian
CVE-2021-47158: linux - In the Linux kernel, the following vulnerability has been resolved: net: dsa: s...
vendor_debian·2021·CVSS 5.5
CVE-2021-47158 [MEDIUM] CVE-2021-47158: linux - In the Linux kernel, the following vulnerability has been resolved: net: dsa: s...
In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: add error handling in sja1105_setup() If any of sja1105_static_config_load(), sja1105_clocking_setup() or sja1105_devlink_setup() fails, we can't just return in the middle of sja1105_setup() or memory will leak. Add a cleanup path.
Scope: local
bookworm: resolved (fixed in 5.14.6-1)
bullseye: resolved (fixed in 5.10.46-1)
forky: resolved (fixed in 5.14.6-1)
sid: resolved (fixed in 5.14.6-1)
trixie: resolved (fixed in 5.14.6-1)
VulDB
Linux Kernel up to 5.10.41/5.12.8 dsa sja1105_setup memory leak (dd8609f20344/987e4ab8b8a4/cec279a898a3 / WID-SEC-2024-0699)
vuldb·2026-08-05·CVSS 5.5
CVE-2021-47158 [MEDIUM] Linux Kernel up to 5.10.41/5.12.8 dsa sja1105_setup memory leak (dd8609f20344/987e4ab8b8a4/cec279a898a3 / WID-SEC-2024-0699)
A vulnerability was found in Linux Kernel up to 5.10.41/5.12.8 and classified as critical. Affected is the function sja1105_setup of the component dsa. Such manipulation leads to memory leak.
This vulnerability is listed as CVE-2021-47158. The attack must be carried out from within the local network. There is no available exploit.
It is suggested to upgrade the affected component.
GHSA
GHSA-9r7q-crgf-5r23: In the Linux kernel, the following vulnerability has been resolved:
net: dsa: sja1105: add error handling in sja1105_setup()
If any of sja1105_stati
ghsa_unreviewed·2024-03-25
CVE-2021-47158 [MEDIUM] CWE-401 GHSA-9r7q-crgf-5r23: In the Linux kernel, the following vulnerability has been resolved:
net: dsa: sja1105: add error handling in sja1105_setup()
If any of sja1105_stati
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: sja1105: add error handling in sja1105_setup()
If any of sja1105_static_config_load(), sja1105_clocking_setup() or
sja1105_devlink_setup() fails, we can't just return in the middle of
sja1105_setup() or memory will leak. Add a cleanup path.
OSV
CVE-2021-47158: In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: add error handling in sja1105_setup() If any of sja1105_static_
osv·2024-03-25·CVSS 5.5
CVE-2021-47158 [MEDIUM] CVE-2021-47158: In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: add error handling in sja1105_setup() If any of sja1105_static_
In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: add error handling in sja1105_setup() If any of sja1105_static_config_load(), sja1105_clocking_setup() or sja1105_devlink_setup() fails, we can't just return in the middle of sja1105_setup() or memory will leak. Add a cleanup path.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/987e4ab8b8a4fcbf783069e03e7524cd39ffd563https://git.kernel.org/stable/c/cec279a898a3b004411682f212215ccaea1cd0fbhttps://git.kernel.org/stable/c/dd8609f203448ca6d58ae71461208b3f6b0329b0https://git.kernel.org/stable/c/987e4ab8b8a4fcbf783069e03e7524cd39ffd563https://git.kernel.org/stable/c/cec279a898a3b004411682f212215ccaea1cd0fbhttps://git.kernel.org/stable/c/dd8609f203448ca6d58ae71461208b3f6b0329b0
2024-03-25
Published